Primary Duties
• Update and improve security policies & procedures.
• Perform user access reviews.
• Perform third-party risk management reviews and other forms of risk management.
• Conduct or assist with compliance audits.
• Foster continuous improvements that enhance overall security & compliance.
• Assist with the production of security program metrics.
Governance
• Update security policies and procedures to enhance security & compliance, meet evolving customer and partner requirements, meet evolving regulatory mandates, and address IT risk areas.
• Audit and improve compliance with Comscore’s policies.
• Assist with gathering operational statistics in support of program metrics.
Access Reviews
• Support Comscore’s user access review process and tool.
• Reliably perform user access reviews to ensure positive audit outcomes.
• Improve access controls and the access management process.
Risk Management
• Contribute to the Comscore Risk Register process to identify, document, treat, or escalate risk areas.
• Leverage Comscore’s vendor risk management tool to conduct third party risk management security reviews.
• Update vendor questionnaires to address recent risk areas.
Compliance
• Monitor user activity, internal processes, and infrastructure for compliance with Comscore policies.
• Develop security controls to improve compliance.
• Contribute to security awareness training.
• Collaborate with external auditors and the Internal Audit team to support ISO 27001/27701 and Sarbanes Oxley (SOX) audits.
Qualifications/Experience/Educational Qualifications
• Bachelor's degree in information systems or equivalent work experience.
• Industry Certifications (e.g. CISA).
Technical Competency
• Knowledge of information security principles, including access control and risk management.
• Experience performing access reviews and using access review tools. Familiarity with Conductor One is preferred.
• Knowledge of GRC tools. Familiarity with Drata is a plus.
• Experie
📌 Security Compliance Analyst (Pune)
🏢 comScore
📍 Pune